CVE-2006-2428

add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...

CVE-2006-2428

add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...

CVE-2006-2428

The CVE-2006-2428 issue affects DUbanner 3.1 (DUware) via the add.asp endpoint, where uploading files with arbitrary extensions (e.g., ASP) can lead to remote code execution. Root cause cited is weak server-side validation/enforcement that can be bypassed by clients. Impact is remote code executi...

PT-2006-3389 · Dubanner · Dubanner

Name of the Vulnerable Software and Affected Versions: DUbanner version 3.1 Description: The issue allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, to the add.asp endpoint, probably due to client-side enforcement that can be...

[SA20102] DUbanner Insecure File Upload Vulnerability

TITLE: DUbanner Insecure File Upload Vulnerability SECUNIA ADVISORY ID: SA20102 VERIFY ADVISORY: http://secunia.com/advisories/20102/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: DUware DUbanner 3.x http://secunia.com/product/2848/ DESCRIPTION: Dj ReMix has...